Update node versions
[mbt-docker.git] / Dockerfile
CommitLineData
65aebb3a 1FROM debian:bookworm-slim
403c6ed0
AV
2
3ARG USER="mta"
4ARG USER_HOME_DIR="/home/${USER}"
5ENV HOME ${USER_HOME_DIR}
6
7RUN set -ex \
8 && apt-get update \
9 && apt-get install -y openssl --no-install-recommends \
10 && rm -rf /var/lib/apt/lists/* \
9277df83 11 # smoke test
b4603354 12 && openssl version \
403c6ed0
AV
13 && useradd --home-dir ${USER_HOME_DIR} \
14 --create-home \
15 --shell /bin/bash \
16 --user-group \
17 --uid 1000 \
18 --comment 'Cloud MTA Build Tool' \
19 --password "$(echo weUseMta | openssl passwd -1 -stdin)" ${USER} \
a739e5ea
JB
20 # allow anybody to write into the image user home directory
21 && chmod a+w ${USER_HOME_DIR} \
22 && apt-get remove --purge --autoremove -y openssl
403c6ed0
AV
23
24ADD http://aia.pki.co.sap.com/aia/SAP%20Global%20Root%20CA.crt \
25 /etc/ssl/certs/SAP_Global_Root_CA.crt
26
39813e44 27ARG NODE_VERSION=16.20.2
403c6ed0
AV
28
29RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
30 && case "${dpkgArch##*-}" in \
31 amd64) ARCH='x64';; \
32 ppc64el) ARCH='ppc64le';; \
33 s390x) ARCH='s390x';; \
34 arm64) ARCH='arm64';; \
35 armhf) ARCH='armv7l';; \
36 i386) ARCH='x86';; \
37 *) echo "unsupported architecture"; exit 1 ;; \
38 esac \
39 && set -ex \
40 && apt-get update \
41 # libatomic1 for arm
69527ac7 42 && apt-get install -y ca-certificates curl gnupg dirmngr xz-utils libatomic1 --no-install-recommends \
403c6ed0 43 && rm -rf /var/lib/apt/lists/* \
7dcc5c4a 44 && export GNUPGHOME="$(mktemp -d)" \
403c6ed0
AV
45 && for key in \
46 4ED778F539E3634C779C87C6D7062848A1AB005C \
47 141F07595B7B3FFE74309A937405533BE57C7D57 \
403c6ed0 48 74F12602B6F1C4E913FAA37AD3A89613643B6201 \
403c6ed0
AV
49 61FC681DFB92A079F1685E77973F295594EC4689 \
50 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 \
51 C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
52 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 \
53 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C \
403c6ed0 54 108F52B48DB57BB0CC439B2997B01419BD92F80A \
46056896 55 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 \
403c6ed0
AV
56 ; do \
57 gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" || \
c52f471b 58 gpg --batch --keyserver hkps://keyserver.ubuntu.com --recv-keys "$key" ; \
403c6ed0
AV
59 done \
60 && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz" \
61 && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" \
62 && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \
63 && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c - \
64 && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner \
7dcc5c4a 65 && rm -rf "$GNUPGHOME" "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
403c6ed0
AV
66 && apt-mark auto '.*' > /dev/null \
67 && find /usr/local -type f -executable -exec ldd '{}' ';' \
68 | awk '/=>/ { print $(NF-1) }' \
69 | sort -u \
70 | xargs -r dpkg-query --search \
71 | cut -d: -f1 \
72 | sort -u \
73 | xargs -r apt-mark manual \
74 && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false \
75 && ln -s /usr/local/bin/node /usr/local/bin/nodejs \
76 # smoke tests
77 && node --version \
78 && npm --version
79
80ARG YARN_VERSION=1.22.19
81
82RUN set -ex \
83 && savedAptMark="$(apt-mark showmanual)" \
8c37d866 84 && apt-get update \
69527ac7 85 && apt-get install -y ca-certificates curl gnupg dirmngr --no-install-recommends \
403c6ed0 86 && rm -rf /var/lib/apt/lists/* \
7dcc5c4a 87 && export GNUPGHOME="$(mktemp -d)" \
403c6ed0
AV
88 && for key in \
89 6A010C5166006599AA17F08146C2130DFD2497F5 \
90 ; do \
91 gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" || \
c52f471b 92 gpg --batch --keyserver hkps://keyserver.ubuntu.com --recv-keys "$key" ; \
403c6ed0
AV
93 done \
94 && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" \
95 && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" \
96 && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz \
97 && mkdir -p /opt \
98 && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ \
99 && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn \
100 && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg \
7dcc5c4a 101 && rm -rf "$GNUPGHOME" yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz \
403c6ed0
AV
102 && apt-mark auto '.*' > /dev/null \
103 && { [ -z "$savedAptMark" ] || apt-mark manual $savedAptMark > /dev/null; } \
104 && find /usr/local -type f -executable -exec ldd '{}' ';' \
105 | awk '/=>/ { print $(NF-1) }' \
106 | sort -u \
107 | xargs -r dpkg-query --search \
108 | cut -d: -f1 \
109 | sort -u \
110 | xargs -r apt-mark manual \
111 && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false \
112 # smoke test
113 && yarn --version
114
efc5a74f 115ARG SAPMACHINE_VERSION=11.0.20
8c37d866 116
ac69ff88
JB
117ENV JAVA_HOME /opt/jdk
118
28df4c45 119RUN sapmachine_install() { \
ac69ff88 120 SAPMACHINE_MAJOR_VERSION=$(echo ${SAPMACHINE_VERSION} | cut -d. -f1); \
28df4c45
JB
121 ARCH=; \
122 dpkgArch="$(dpkg --print-architecture)"; \
123 case "${dpkgArch##*-}" in \
865db469
JB
124 amd64) ARCH='amd64';; \
125 *) echo "unsupported architecture"; exit 1 ;; \
28df4c45
JB
126 esac; \
127 apt-get update; \
128 apt-get install -y ca-certificates gnupg dirmngr --no-install-recommends; \
129 rm -rf /var/lib/apt/lists/*; \
130 export GNUPGHOME="$(mktemp -d)"; \
131 for key in \
132 CACB9FE09150307D1D22D82962754C3B3ABCFE23 \
133 ; do \
134 gpg --no-default-keyring --keyring gnupg-ring:/etc/apt/trusted.gpg.d/sapmachine.gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" || \
135 gpg --no-default-keyring --keyring gnupg-ring:/etc/apt/trusted.gpg.d/sapmachine.gpg --batch --keyserver hkps://keyserver.ubuntu.com --recv-keys "$key" ; \
136 done; \
137 chmod 644 /etc/apt/trusted.gpg.d/sapmachine.gpg; \
138 echo "deb http://dist.sapmachine.io/debian/${ARCH}/ ./" | tee /etc/apt/sources.list.d/sapmachine.list; \
139 apt-get update; \
ac69ff88 140 apt-get install -y sapmachine-${SAPMACHINE_MAJOR_VERSION}-jdk=${SAPMACHINE_VERSION} --no-install-recommends; \
28df4c45
JB
141 rm -rf "$GNUPGHOME" /var/lib/apt/lists/*; \
142 apt-get remove --purge --autoremove -y ca-certificates gnupg dirmngr; \
ac69ff88 143 ln -s /usr/lib/jvm/sapmachine-${SAPMACHINE_MAJOR_VERSION} ${JAVA_HOME}; \
28df4c45
JB
144 }; \
145 sapjvm_install() { \
146 ARCH=; \
147 dpkgArch="$(dpkg --print-architecture)"; \
148 case "${dpkgArch##*-}" in \
149 amd64) ARCH='x64';; \
150 ppc64el) ARCH='ppc64le';; \
151 *) echo "unsupported architecture"; exit 1 ;; \
152 esac; \
153 apt-get update; \
154 apt-get install -y ca-certificates curl libarchive-tools --no-install-recommends; \
155 rm -rf /var/lib/apt/lists/*; \
156 curl -fsSLO --compressed -b 'eula_3_1_agreed=tools.hana.ondemand.com/developer-license-3_1.txt' https://tools.hana.ondemand.com/additional/sapjvm-${SAPMACHINE_VERSION}-linux-${ARCH}.zip; \
410bc0b9 157 echo "7d63f20b17becb5f658d413c113ea9efdfbba6a0 sapjvm-${SAPMACHINE_VERSION}-linux-${ARCH}.zip" | sha1sum -c -; \
c8a3e45a 158 bsdtar -xvf sapjvm-${SAPMACHINE_VERSION}-linux-${ARCH}.zip -C /usr/local --strip-components=1 --no-same-owner; \
28df4c45
JB
159 rm -f sapjvm-${SAPMACHINE_VERSION}-linux-${ARCH}.zip; \
160 apt-get remove --purge --auto-remove -y ca-certificates curl libarchive-tools; \
ac69ff88 161 ln -s /usr/local ${JAVA_HOME}; \
28df4c45 162 } \
865db469 163 && set -ex \
28df4c45
JB
164 && if [ $(echo ${SAPMACHINE_VERSION} | cut -d. -f1) -le 8 ]; then \
165 sapjvm_install; \
166 else \
167 sapmachine_install; \
168 fi \
8c37d866 169 # smoke test
45636150 170 && java -version
8c37d866 171
57e9eed7 172ARG MAVEN_VERSION=3.9.3
b4603354 173ARG BASE_URL=https://downloads.apache.org/maven/maven-3/${MAVEN_VERSION}/binaries
403c6ed0
AV
174
175ENV MAVEN_HOME /usr/share/maven
176ENV M2_HOME ${MAVEN_HOME}
177
178RUN set -ex \
179 && apt-get update \
b4603354 180 && apt-get install -y ca-certificates curl gnupg dirmngr --no-install-recommends \
403c6ed0 181 && rm -rf /var/lib/apt/lists/* \
b4603354
JB
182 && curl -fsSLO --compressed ${BASE_URL}/apache-maven-${MAVEN_VERSION}-bin.tar.gz \
183 && curl -fsSLO --compressed ${BASE_URL}/apache-maven-${MAVEN_VERSION}-bin.tar.gz.asc \
7dcc5c4a 184 && export GNUPGHOME="$(mktemp -d)" \
c52f471b 185 && for key in \
42a14563 186 29BEA2A645F2D6CED7FB12E02B172E3E156466E8 \
c52f471b
JB
187 ; do \
188 gpg --batch --keyserver hkps://pgp.surf.nl --recv-keys "$key" || \
189 gpg --batch --keyserver hkps://keyserver.ubuntu.com --recv-keys "$key" ; \
190 done \
b4603354 191 && gpg --batch --verify apache-maven-${MAVEN_VERSION}-bin.tar.gz.asc apache-maven-${MAVEN_VERSION}-bin.tar.gz \
403c6ed0 192 && mkdir -p ${MAVEN_HOME} ${MAVEN_HOME}/ref \
b4603354 193 && tar -xzf apache-maven-${MAVEN_VERSION}-bin.tar.gz -C ${MAVEN_HOME} --strip-components=1 \
d0487684 194 && rm -rf "$GNUPGHOME" apache-maven-${MAVEN_VERSION}-bin.tar.gz.asc apache-maven-${MAVEN_VERSION}-bin.tar.gz \
27e53e8b 195 && chmod -R a+w ${MAVEN_HOME}/conf/* \
403c6ed0 196 && ln -s ${MAVEN_HOME}/bin/mvn /usr/bin/mvn \
b4603354 197 && apt-get remove --purge --autoremove -y ca-certificates curl gnupg dirmngr \
8c37d866 198 # smoke test
403c6ed0
AV
199 && mvn --version
200
efc5a74f 201ARG MBT_VERSION=1.2.24
8c37d866
JB
202
203RUN set -ex \
872cd04b 204 && npm install -g --unsafe-perm mbt@${MBT_VERSION} \
34672c4c 205 && npm cache clean -g --force \
8c37d866
JB
206 # smoke test
207 && mbt --version
208
209# SAP e-Mobility requirements
403c6ed0
AV
210RUN set -ex \
211 && apt-get update \
43e27b30 212 && apt-get install -y ca-certificates build-essential python3 --no-install-recommends \
403c6ed0 213 && rm -rf /var/lib/apt/lists/* \
403c6ed0 214 # smoke test
8c37d866 215 && python3 --version
403c6ed0 216
cd6b37dc 217# Allow global npm packages install without sudo
3269c633
JB
218RUN set -ex \
219 && mkdir ${USER_HOME_DIR}/.npm-global \
f7497ddb 220 && mkdir ${USER_HOME_DIR}/.npm-global/lib \
018f8f60 221 && chown -R ${USER}:${USER} ${USER_HOME_DIR}
cd6b37dc
JB
222ENV NPM_CONFIG_PREFIX ${USER_HOME_DIR}/.npm-global
223
403c6ed0
AV
224WORKDIR /project
225USER ${USER}